topic Re: DNS Server Replace in Firewall and Security Management

DNS Server Replace

cp-bc123 — Tue, 12 May 2020 16:48:13 GMT

Hi,

I am trying to replace DNS servers IPs on gateways. after I changed IP address of primary and secondary and tertiary DNS server.

I noticed DNS queries were still being made agaisnt the old ones.

How can I force or restart dns service of the gateway to start using the new ones?

if there are proper steps I should take to make this change, can you share please?

Re: DNS Server Replace

PhoneBoy — Wed, 13 May 2020 02:52:10 GMT

It's possible one or more processes have cached the DNS Servers to use.
You may need to perform a cprestart (which is service impacting) to fix this.

Re: DNS Server Replace

cp-bc123 — Thu, 14 May 2020 17:09:45 GMT

Thank you for the reply.

I did cprestart but not all the cp services come back online . so I ended up rebooting the box as we have HA.

Re: DNS Server Replace

DR_74 — Tue, 14 Mar 2023 15:32:54 GMT

Hello,

Does the reboot solves your issue?

We have the same behaviour on a R81.10 Gateway (with VSX), and even after changing the DNS servers, we still see requests to the old DNS servers.

Thanks

Re: DNS Server Replace

Chris_Atkinson — Wed, 15 Mar 2023 07:47:28 GMT

Yes most likely this will address the issue based on my prior experience.

Re: DNS Server Replace

JohAicher — Mon, 20 Mar 2023 12:51:33 GMT

cpwd_admin stop -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "fw kill wsdnsd"; cpwd_admin start -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "wsdnsd"

Re: DNS Server Replace

JohAicher — Mon, 20 Mar 2023 12:54:21 GMT

sk161632

Re: DNS Server Replace

_Val_ — Mon, 20 Mar 2023 13:38:32 GMT

Uh, so the question was about DNS related to HTTPSi or updatable objects, or both?

Re: DNS Server Replace

DR_74 — Mon, 20 Mar 2023 13:42:58 GMT

Hi Val

Exactly the question was about changing the DNS server for the VSX. When we change them from VS0 for all the other vs we notice that we still have requests to the old DNS servers. Show dns show the correct DNS servers

Do we need to reboot or is the a known command to ask to use the new DNS

Regards

Re: DNS Server Replace

JohAicher — Tue, 21 Mar 2023 14:36:50 GMT

just run:

cpwd_admin stop -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "fw kill wsdnsd"; cpwd_admin start -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "wsdnsd"

and you see that the DNS queries goes to the new DNS Server - for all services running on the CP box

Re: DNS Server Replace

Arskazv — Thu, 05 Jun 2025 11:25:31 GMT

I did this today, and it worked.

In my opinion, it's a bug. Some sk says, that it's (wsdnsd) always restarted in policy install, but that’s not the case...